$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa File: b7677b23-569f-3269-882c-0cdb2f1c8cad.roa (raw, json) Hash identifier: oCzBphvahYhAipXrXsJ7LeEZjOgYI6010eNXSti4kSo= Subject key identifier: E2:96:DB:4D:52:4C:3F:8F:17:98:B5:A8:BA:76:53:9F:CA:5F:1D:52 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584957F3F1556518569D20B61080 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 31898 IP address blocks: 68.64.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f1:55:65:18:56:9d:20:b6:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=de71be82-6e71-4999-babe-b9b811a3d0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8a:02:4f:53:78:87:97:98:06:03:8d:71:4e: c0:d9:bc:ea:4c:83:8b:56:03:61:72:54:22:1f:38: cd:c4:04:30:7a:a6:c0:2c:35:a6:7e:9b:c2:a8:a0: 05:9c:e7:62:6f:8a:4e:ba:2d:0b:5f:66:d2:e4:91: 60:2e:be:f2:ab:64:c5:ad:61:a3:5e:70:32:a4:97: 65:91:b9:a9:e0:dd:5a:28:ab:af:3c:6b:71:45:a0: d3:fa:a6:e6:63:2e:72:24:9b:f1:f7:0d:87:2e:ca: 09:99:30:8c:c0:03:ad:76:6e:45:aa:b0:8c:a4:35: 86:60:65:d6:85:86:88:be:f2:6e:13:48:d2:24:60: 86:3f:90:49:9a:4a:92:9a:27:13:36:4c:8f:95:4c: 87:0b:18:6b:6e:af:92:01:a1:bf:69:fb:a3:ef:e2: eb:a9:f8:fe:93:31:d0:cf:09:c7:fa:47:33:76:93: 64:68:8e:c6:da:de:34:6a:20:24:6d:78:07:b3:28: cc:a6:37:12:67:71:0e:a1:5d:ed:3b:b5:84:35:95: df:83:9b:97:c8:77:e9:92:1b:92:ca:ef:bf:09:21: 5b:76:d8:eb:c0:04:46:11:e6:ca:6b:50:6a:bd:05: 6d:42:07:2d:d8:04:fd:bb:b2:af:c2:40:1c:71:2d: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:96:DB:4D:52:4C:3F:8F:17:98:B5:A8:BA:76:53:9F:CA:5F:1D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:18:54:fb:48:c7:1a:6c:2f:29:ab:24:2c:22:3f:9c:f8:a6: 39:e9:78:09:d0:48:6d:f0:ff:07:cc:63:02:91:4d:80:99:71: 2b:36:42:ee:0c:bb:a3:e7:58:55:8d:71:bc:34:ed:a0:55:a4: 87:7b:1d:43:74:77:a4:85:b3:d6:35:13:88:55:2e:e3:37:21: bc:d3:63:3d:f8:15:bb:e6:c5:e8:df:85:44:d0:fc:08:a0:30: 8d:7e:0b:d6:b6:86:9f:07:7d:96:7f:22:0d:3f:b6:72:11:3c: 2f:6c:f1:5b:be:66:dc:31:5e:01:95:75:6e:e2:12:ce:04:96: e3:1c:75:a4:29:15:c0:4c:28:5a:f5:46:f1:3d:03:02:40:7a: 0d:0a:94:bd:30:95:7f:ff:11:99:da:48:e6:48:4c:95:22:47: b6:ff:9a:24:7e:26:f7:d3:c7:38:03:37:33:16:31:8c:87:ed: e0:cf:57:0a:6b:06:f0:f8:5e:0c:0b:99:b4:e6:ee:37:ea:dd: e4:b6:2a:f2:ad:96:75:1d:14:22:b2:ca:87:73:b4:9e:a7:8a: 13:f3:73:02:99:b0:c6:a1:c9:cf:77:f2:f5:56:e2:90:54:46: 7a:9a:14:b3:09:1e:cc:8b:53:24:9f:67:8f:80:d6:43:d5:35: a7:b8:dc:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/FVZRhWnSC2EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZGU3MWJlODItNmU3MS00OTk5LWJhYmUtYjliODExYTNkMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIoCT1N4h5eYBgONcU7A2bzqTIOLVgNhclQi HzjNxAQweqbALDWmfpvCqKAFnOdib4pOui0LX2bS5JFgLr7yq2TFrWGjXnAypJdl kbmp4N1aKKuvPGtxRaDT+qbmYy5yJJvx9w2HLsoJmTCMwAOtdm5FqrCMpDWGYGXW hYaIvvJuE0jSJGCGP5BJmkqSmicTNkyPlUyHCxhrbq+SAaG/afuj7+Lrqfj+kzHQ zwnH+kczdpNkaI7G2t40aiAkbXgHsyjMpjcSZ3EOoV3tO7WENZXfg5uXyHfpkhuS yu+/CSFbdtjrwARGEebKa1BqvQVtQgct2AT9u7KvwkAccS3JVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKW201STD+PF5i1qLp2U5/KXx1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjc2NzdiMjMtNTY5Zi0z MjY5LTg4MmMtMGNkYjJmMWM4Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcYVPtIxxpsLymrJCwiP5z4pjnpeAnQSG3w/wfMYwKRTYCZcSs2Qu4M u6PnWFWNcbw07aBVpId7HUN0d6SFs9Y1E4hVLuM3IbzTYz34FbvmxejfhUTQ/Aig MI1+C9a2hp8HfZZ/Ig0/tnIRPC9s8Vu+ZtwxXgGVdW7iEs4EluMcdaQpFcBMKFr1 RvE9AwJAeg0KlL0wlX//EZnaSOZITJUiR7b/miR+JvfTxzgDNzMWMYyH7eDPVwpr BvD4XgwLmbTm7jfq3eS2KvKtlnUdFCKyyodztJ6nihPzcwKZsMahyc938vVW4pBU RnqaFLMJHsyLUySfZ4+A1kPVNae43M8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:46 2025 by rpki-client